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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims : 

Claim 1 (Currently Amended): A method for protected execution of a cryptographic 
calculation, in which a key with at least two key parameters is drawn on, wherein an integrity 
check of the key is performed in order to prevent a cryptographic attack in which conclusions 
are drawn as to at least one second key parameter by corrupting at least one first key 
parameter , and wherein the cryptographic calculation is one of a decryption in an RSA 
method and a signature generation in an RSA method . 

Claim 2-13 (Canceled). 

Claim 14 (Currently Amended): A The method as claimed in claim 1, wherein in the 
integrity check it is determined whether the value of at least one key parameter is contained in 
a range of valid values, wherein the range is non-contiguous in that it has a plurality of gaps. 

Claim 15 (Currently Amended): A The method as claimed in claim 1, wherein in the 
integrity check it is determined whether at least two key parameters are in a predetermined 
relationship to one another. 

Claim 16 (Currently Amended): A The method as claimed in claim 1, wherein the integrity 
check includes a multiplicative operation, in particular a divisibility test. 

Claim 17 (Currently Amended): A The method as claimed in claim 1, wherein in the 
integrity check it is checked whether at least one of the key parameters is evenly divisible by 
fee a safeguard value. 
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Claim 18 (Currently Amended): A The method as claimed in claim 1, wherein in the 
integrity check it is checked whether at least one value which differs from one of the key 
parameters by a multiple of a safeguard value is evenly divisible by the safeguard value. 

Claim 19 (Currently Amended): A The method as claimed in claim 1, wherein in the 
integrity check a checksum stored with the key parameters is compared with a checksum 
newly calculated after passing of the key parameters. 

Claim 20 (Currently Amended): A The method as claimed in claim 1, wherein, to check 
the integrity, important parameters to be passed are multiply passed and checked for identity 
after passing. 

Claim 21 (Canceled). 

Claim 22 (Currently Amended): A The method as claimed in claim 3-1- J_, wherein the RSA 
method is an RSA-CRT method. 

Claim 23 (Currently Amended): A The method as claimed in claim 34- j_, wherein in the 
cryptographic calculation at least one exponentiation operation is performed and in the 
integrity check it is checked whether the exponent used in the exponentiation operation is 
evenly divisible by a safeguard value. 

Claim 24 (Currently Amended): A The method as claimed in claim 23, wherein in the 
cryptographic calculation an exponent blinding method is applied for protection against 
spying. 
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Claim 25 (Currently Amended): A The method as claimed in claim 24 J_, wherein the 
prime factors of the RS A method are multiplied by a masking parameter and the an error 
freedom of the calculation sequence is checked by an equality check modulo the masking 
parameter. 

Claim 26 (Currently Amended): A The method as claimed in claim 1, wherein at least one 
key parameter is the product of a value required for the cryptographic calculation times a 
safeguard value, and wherein the integrity check includes a divisibility check. 

Claim 27 (Currently Amended): A method for determining a key for a cryptographic 
calculation with at least two key parameters, the key being adapted to be used in a method for 
protected execution of a cryptographic calculation wherein an integrity check of the key is 
performed in order to prevent a cryptographic attack in which conclusions are drawn as to at 
least one second key parameter by corrupting at least one first key parameter , and wherein the 
cryptographic calculation is one of a decryption in an RSA method and a signature generation 
in an RSA method . 

Claim 28 (Currently Amended): A The method as claimed in claim 27, characterized in 
that at least one key parameter is obtained by multiplication of a value required for the 
cryptographic calculation by a safeguard value. 

Claim 29 (Currently Amended): A The method as claimed in claim 27, wherein at least 
one key parameter is the product of a value required for the cryptographic calculation times a 
safeguard value, and wherein the integrity check includes a divisibility check. 
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Claim 30 (Currently Amended): A computer program product including a computer- 
readable storage medium having a computer program stored thereon, the computer program 
including which has program commands to cause a processor to execute a method for 
protected execution of a cryptographic calculation, in which a key with at least two key 
parameters is drawn on, wherein an integrity check of the key is performed in order to prevent 
a cryptographic attack in which conclusions are drawn as to at least one second key parameter 
by corrupting at least one first key parameter , and wherein the cryptographic calculation is 
one of a decryption in an RSA method and a signature generation in an RSA method . 

Claim 31 (Currently Amended): A The computer program product as claimed in claim 30, 
wherein at least one key parameter is the product of a value required for the cryptographic 
calculation times a safeguard value, and wherein the integrity check includes a divisibility 
check. 

Claim 32 (Currently Amended): A portable data carrier set up for executing a method for 
protected execution of a cryptographic calculation, in which a key with at least two key 
parameters is drawn on, wherein an integrity check of the key is performed in order to prevent 
a cryptographic attack in which conclusions are drawn as to at least one second key parameter 
by corrupting at least one first key parameter , wherein the data carrier is one of a smart card 
and a chip module, and wherein the cryptographic calculation is one of a decryption in an 
RSA method and a signature generation in an RSA method . 

Claim 33 (Canceled). 
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Claim 34 (Currently Amended): A The portable data carrier as claimed in claim 32, 
wherein at least one key parameter is the product of a value required for the cryptographic 
calculation times a safeguard value, and wherein the integrity check includes a divisibility 
check. 
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